
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier: 8xaCAtu6YpLK4jYjM4QZxgOd03xgmhc5+PEl86ETThU=
Subject key identifier: EA:86:61:43:2E:52:3C:D1:3E:33:56:8A:15:3A:F2:36:0B:8D:EB:5A
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 01A18FB0224F367623F028840171602848C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number: 13B7
Signing time: Sat 31 Oct 2026 02:00:47 +0000
Manifest this update: Sat 31 Oct 2026 02:00:47 +0000
Manifest next update: Sun 01 Nov 2026 02:00:47 +0000
Files and hashes: 1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: eZGnk+PxHIKrCydrDuszcpirjeIUJxH8oKTWUKPHXKU=)
2: hKeFeFo6493_38OQ9i00adzif9I.roa (hash: 53uE5bZj+EC0/O49ny+JkcCWuYcfpKEUEDdPY2U5sKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:22:4f:36:76:23:f0:28:84:01:71:60:28:48:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Oct 31 02:00:47 2026 GMT
Not After : Nov 1 02:00:47 2026 GMT
Subject: CN=ea8661432e523cd13e33568a153af2360b8deb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:84:19:dd:0a:5a:ac:7e:9e:39:76:d5:97:
35:a1:39:87:8e:61:17:e7:df:da:66:f4:55:4a:56:
79:32:88:f8:79:63:b8:ed:6c:6a:79:cc:21:83:53:
a8:bd:ac:76:96:20:20:f6:0e:e5:6f:25:aa:97:58:
72:c2:8d:8c:ea:35:9c:14:b7:14:8b:f5:75:77:ed:
0e:fc:a5:38:0f:59:98:30:d2:19:40:73:25:2f:ba:
29:56:86:0a:30:c8:bb:36:25:cd:9e:43:92:32:8f:
29:e6:07:28:c0:16:50:67:a5:6f:c4:fe:8a:2f:4f:
b0:7c:44:49:e9:ee:f6:da:94:58:23:bd:50:6a:dc:
e1:8b:e8:2f:7e:5e:1e:64:0e:f9:0c:d4:86:03:80:
f5:de:27:0f:29:b8:7c:e2:a5:20:9f:ef:3d:f3:5b:
31:8e:0d:8e:ef:1b:22:a7:f1:98:a4:0a:25:40:dd:
d1:45:55:a7:d6:f4:37:98:8a:21:52:0a:19:4f:5f:
45:d1:71:d2:87:16:d7:08:7d:27:12:7d:49:99:51:
d7:11:20:3b:57:44:f9:0a:a1:ca:1e:06:45:1f:94:
dc:f9:ff:42:be:cd:6f:79:1f:b4:33:2d:39:b8:30:
82:04:49:55:3f:fd:e5:b4:4c:af:08:46:f6:69:eb:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:86:61:43:2E:52:3C:D1:3E:33:56:8A:15:3A:F2:36:0B:8D:EB:5A
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b9:41:03:8d:0b:67:28:b6:ed:20:69:07:60:31:4a:a9:b0:
80:41:0d:63:96:b9:1e:cd:9c:b2:d5:d2:b6:28:ed:37:16:f8:
21:cb:ec:5e:5c:fa:44:80:be:cc:2b:e4:65:e7:8a:2f:70:66:
7f:7a:ec:25:f8:18:eb:be:cf:cc:b2:2f:36:80:0d:75:7d:64:
7e:65:a1:00:b1:26:3a:31:2b:15:9f:da:80:82:cb:64:ac:28:
3c:15:a8:ac:c1:4a:97:95:c8:6b:52:c1:50:8a:99:dd:a3:d6:
06:39:67:d7:db:28:55:c8:35:db:c9:70:25:44:d8:db:90:48:
8a:fe:0d:7b:ef:1b:d9:09:7b:4a:4b:7a:72:56:fc:47:c9:7a:
0e:69:fd:74:57:48:eb:fa:03:a6:90:7c:e3:c4:bc:52:e3:ee:
a6:93:e4:8b:d8:8b:70:75:cb:fb:c5:58:c8:2e:04:da:80:56:
51:3a:82:af:d1:0a:9a:4c:c0:29:a2:f7:0c:89:2a:f0:8a:e0:
86:a3:9f:a5:1d:e9:08:e8:96:93:47:16:a1:18:16:a3:26:88:
f2:27:0a:63:72:75:c5:21:84:5c:75:9f:c8:08:7b:0b:aa:52:
ca:c4:9e:e6:ee:ce:1c:d2:bf:5a:84:74:4d:1e:37:a6:30:aa:
ad:bb:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:19:46 2026 by rpki-client